To reproduce: 1. Create a new mail group with privacy "Everyone" (menu: Website / Configuration / Mailing Lists / Mailing Lists) 2. As an anonymous user, go to /groups and click on its name 3. A 403 Forbidden error is displayed: `You are not allowed to access 'Email Aliases' (mail.alias) records.` This commit is a followup of odoo/odoo@cd2f330bec where global mail.alias access rights were revoked, so we have to check if alias is valid as superuser. closes odoo/odoo#128915 Signed-off-by: Thibault Delavallee (tde) <tde@openerp.com>